Exploit code released for Microsoft CVE-2024-30085

CVE-2024-30085 is a high-severity vulnerability identified in the Windows Cloud Files Mini Filter Driver (cldflt.sys). This vulnerability arises from a heap-based buffer overflow issue, which can be exploited by local attackers to escalate privileges and gain SYSTEM-level access. This poses a significant security risk as it allows attackers to execute arbitrary code with elevated permissions. […]

CVE-2025-27364 affects MITRE Caldera

thecyberthrone.in - 01/Mar 05:01

CVE-2025-27364 is a critical Remote Code Execution (RCE) vulnerability identified in MITRE Caldera, a highly regarded cybersecurity platform used for...

NITDA Warns of ‘Malicious Viper’ Striking Critical Security Flaw in Jupiter X Core WordpPress Plugin

technologymirror.com.ng - 06/Mar 18:08

National Information Technology Development Agency (NITDA), has uncovered a critical security flaw in the Jupiter X Core plugin for WordPress,...

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

itsecuritynews.info - 27/Feb 06:04

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers...

Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover

itsecuritynews.info - 05/Mar 06:03

A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows...

CVE-2025-0337 impacts ServiceNow

thecyberthrone.in - 08/Mar 14:55

CVE-2025-0337 is classified as a high-severity authorization bypass vulnerability impacting the ServiceNow Now Platform, specifically targeting the...

Cisco Nexus Switch Vulnerability Allows Attackers to Cause DoS

itsecuritynews.info - 27/Feb 05:32

Cisco Systems has disclosed a high-severity vulnerability (CVE-2025-20111) in its Nexus 3000 and 9000 Series Switches operating in standalone NX-OS...

CVE-2025-20059 impacts Ping Identity

thecyberthrone.in - 01/Mar 13:10

CVE-2025-20059 represents a critical security vulnerability known as a Relative Path Traversal flaw, which impacts the Ping Identity PingAM Java...

CVE-2024-4577 impacts PHP and exploited in wild

thecyberthrone.in - 08/Mar 12:04

CVE-2024-4577 is a critical Remote Code Execution (RCE) vulnerability affecting PHP when running in CGI mode on Windows systems with Apache. This flaw...

CVE-2025-25012 impacts Kibana

thecyberthrone.in - 07/Mar 01:12

CVE-2025-25012 is a critical vulnerability identified in Elastic Kibana, a widely used data visualization and exploration platform for Elasticsearch....

CVE-2025-23363 impacts Siemens TeamCenter

thecyberthrone.in - 02/Mar 11:28

CVE-2025-23363 is a high-severity vulnerability identified in Siemens Teamcenter, a product lifecycle management (PLM) software suite used by...

Rubriques :